37
37
future that you no longer have any services using older weaker enctypes,
38
38
you can get the full security benefits of stronger encryption types by
39
39
dropping the weaker ones from supported_enctypes in /etc/krb5kdc/kdc.conf.
40
Note however, that for some services, like AFS and Zephyr, you may need to
40
Note however, that for some services, like AFS, you may need to only create
43
43
kadmin.local -e des-cbc-crc:normal -q "ktadd afs/ATHENA.MIT.EDU"